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This overview summarizes the major functions performed by the 
UNIX™ PC Ethernet Expansion Board hardware. The topics covered 
here include : 

o Interface I/O description 

o Status and command circuitry 

o State machine control circuitry 

o LANCE interface 

o Ethernet inter face 

o Software interface 

Ftheme t Expansion Board 

The Ethernet Expansion Board (EEB) , when plugged into an AT&T 
UNIX^"^ PC, provides an interface to an Ethernet communications 
network operating at a transfer rate of lOMB/sec. The EEB is 
based on the AMD 7990 and 7992 chip set, which performs the 
i following functions: 

o AM7990 Local Area Network Controller for Ethernet (LANCE) 

performs memory management, packet handling, error reporting, 
and interface functions. 

o AM7992 Serial Interface Adapter (SIA) performs Manchester 
encoding and decoding of the serial bit stream with phase 
lock loop, clock recovery. 

The Expansion Board, as shown in the Figure 1 block diagram, is a 
circuit board containing the I/O and DMA interface to the LANCE 
chip, a state machine with a read/write control register, a 
separate DMA controller for LANCE status, and a board ID/Ethernet 
address ROM. 
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Once the LANCE chip is initialized, all data transfers including 
buffer chaining are handled by the chip. Timing and control are 
maintained by the on-board state machine. LANCE status is 
transferred to memory by a separate state machine DMA controller 
on each LANCE interrupt. This status is placed in a 256 -word 
ring in memory allowing the software a 256 -packet interrupt 
latency. Because of maximum throughput, the CPU is able to find 
all data and status in memory and never needs to talk directly to 
the board. The board is also not required to wait for CPU 
response or to share board resources with the CPU accesses. 

LANCE operation consists of two distinct modes, transmit and 
receive. In the transmit mode, the LANCE chip directly accesses 
data in memory. Data is conditioned by adding a preamble, sync 
pattern, and appending a 32 -bit cycle redundancy check (CRC) . 

This packet is sent from the LANCE to the AM7992A Serial 
Interface Adapter (SIA) . The SIA then transmits this packet to 
the Ethernet system AM7995 transceiver. In the receive mode, 
packets are sent by the SIA to the LANCE. 

^ > Ethernet Interface 

The Ethernet system, to which the EEB is connected, consists of 
an external AM7995 transceiver with power supply and the Ethernet 
coax transmission line. The EEB is connected to this system by 
cable. For a detailed description of the Ethernet system 
interface, refer to the Ethernet /lEKE BO 2. 3 specification and 
the technical manual for Local Area Network Controller AM 7990 
(LANCE) by Advanced Micro Devices . 

Interface I /O Description 

The expansion-board interface consists of drivers and receivers 
for all required signals to and from the UNIX PC's expansion bus. 
The expansion data bus goes through buffers that are controlled 
by the state machine section to create the internal data bus . 

The address bus and the bus cycle control signals are received 
with buffers that are always enabled to create the internal 
address and control bus. The internal address and control bus, 
with the comparator for board ID, allows constant monitoring for 
board I/O requests, which are then passed on to the state 
machine . 



For board-initiated DMA cycles, the state machine -generated 
request, read/write, and data strobe signals are also driven onto 
the expansion bus by this section. 
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The amount of on-board status and command information is limited. 
The board ID function has been expanded to allow the CPU to 
interrogate the board for the 6 -byte Ethernet address, as well as 
for the required 4-byte board ID. This information is contained 
in a 32 -byte prom accessed at odd byte addresses in the upper 32 
bytes of the board address block. A write to any of these 
addresses produces a board reset . 

CPU Read/Write Access 

The status and command section provides CPU read/write access to 
the LANCE chip address and data ports. However, due to the long 
access time of the chip, LANCE reads do not provide data to the 
CPU in a single cycle. Data is latched on board during the LANCE 
read; it is then read by the CPU in a separate latch read cycle. 

LANCE Interrupt Status 

This section contains a 16-bit register and an 8-bit counter. 
The LANCE interrupt status is written automatically to memory at 
the location of the combined 24-bit address by the on-board DMA. 

Read/Write Control Register 

A 4-bit read/write control register is also contained in this 
section. This register allows the CPU to disable DMA for 
diagnostic purposes, select Ethernet, and make selections between 
INT 01 and INT 05. The register contains one unused bit. 

Stat Q Machine Control Circuitry 

The state machine control section consists of five PALs providing 
control and timing signals for all other sections. A 20R8 PAL 
determines when a board cycle needs to be initiated and what type 
of cycle it should be. The 20R8 arbitrates between LANCE DMA 
requests (HOLD) , LANCE interrupts, and CPU I/O requests and 
generates the LANCE HLDA and expansion bus requests as well as on- 
board I/O cycles. 
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Each of 11 non-idle cycles has its own timing and control 
requirements (see timing diagrams for more detail) . These cycles 
consist of five CPU- initiated operations which are: 

o CPU non- LANCE Read 

o CPU non -LANCE Write 

o CPU LANCE Read 

o CPU LANCE Write 

o CPU Data Latch Read 

These are all individual cycles that can occur only when the 
state machine is in its idle state . The state machine is always 
returned to the idle state . 

Three additional cycles are initiated by LANCE DMA requests . 
These are : 

o request cycle 

o LANCE DMA read cycle 

o LANCE DMA write cycle 

The request cycle precedes a single LANCE DMA cycle or burst of 
cycles. This cycle insures UNIX PC LANCE synchronization. The 
LANCE DMA read or write cycles follow the request cycle. The 
state machine goes directly from the request cycle to the read or 
write without going through idle. As long as the LANCE DMA 
request stays active, each DMA cycle leads directly to the next, 
again without idle. LANCE DMA requests are either single cycle 
for buffer management fetches or bursts of eight cycles for data 
transfers . 

The three final cycle types are also linked together with no 
intervening idle states . When the LANCE asserts its interrupt 
the state machine executes a status LANCE read cycle reading the 
LANCE interrupt status into the on-board data latch. A status 
DMA cycle is executed to place the status in the status ring in 
memory. Finally, a status LANCE write is executed to clear the 
LANCE interrupt, and a CPU interrupt is generated at the same 
time . 
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The 20R8 PAL encodes the cycle type in 4 bits. These 4 bits are 
fed to three additional registered PALS. These signals combine 
with a 3-bit counter for timing within each cycle and, with 
several handshake signals from the LANCE, allowing these three 
PALS to generate all LANCE-related timing and control signals. 

In addition, an I/O cycle signal is generated for on-board non- 
LANCE cycles. This signal goes to the fifth PAL. This PAL is a 
nonregistered PAL that generates timing and control for on-board 
I/O that is based on I/O cycle and address decodes. 
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LANCE Interface 

The LANCE interface consists of a 16 -bit, multiplexed address and 
data bus with associated handshake signals. The hardware 
provides three sets of 16 -bit latches for address, read data, and 
write data. This section also includes a buffer for the upper 5 
bits of address and a 4-bit data buffer. These buffers provide 
for the status write to clear the LANCE interrupt. 

Ethernet Int erface 

The Ethernet interface is handled by the AMD chip set. The LANCE 
chip sends transmit data to the 7992 and gets receive data and 
collision detection from the 7992. The 7992 provides the 
interface to the off -board transceiver through a standard 15 -pin 
D-connector interface. Table 1 lists the pin-out assignments for 
this connector . 



Table 1 Ethernet 15 -Pin D Connector 



Pin 


Signal 


Pin 


Signal 


Pin 


Signal 


1 


GND 


6 


GND 


11 


Not Used 


2 


COL+ 


7 


Not Used 


12 


RCVR- 


3 


TRANS+ 


8 


Not Used 


13 


PLUS12 


4 


Not Used 


9 


COL- 


14 


Not Used 


5 


RCVR+ 


10 


TRANS- 


15 


Not Used 



Software In te r f a c e 



The EEB occupies the standard 256Kbyte (or 128K word) block 
assigned to each expansion slot. 
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Expansion Slot 

The expansion cards in the UNIX PC are each assigned 256K bytes 
of address space. Since all addressing is done on word 
boundaries, 128K words of address space is available. Expansion 
bus address bits XAl - XA17 define this space. Each expansion 
slot contains hardwired identification bits XIDO - XID2 to define 
seven unique slot addresses. Bits XA18 - XA20 are compared 
against the slot identification bits to validate the address. 
Also, address bit XA21 is always zero; similarly, expansion 
addresses XA22 and XA23 are always ones. 

Therefore, once the EEB is plugged into its slot, the 
predetermined XA18 - XA23 bits generate the offset address, while 
bits XAl - XA17 are the base addresses used to access I/O 
devices . 

The offset addresses used in the UNIX PC are listed below. 



Table 2 Expansion Slot Offset Addresses 
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Slot Nimiber 


Offset Address 


(h) 





ocooooo 




1 


0C40000 




2 


0C80000 




3 


occoooo 




4 


ODOOOOO 




5 


0D40000 




6 


OD80000 




7 


ODCOOOO 





On -Board Addressing 

Only a small number of addresses are decoded for on-board 
functions. These addresses are not fully decoded in hardware. 
Undefined addresses should not be used; they may affect on-board 
functions. Reads and writes are always full words, even if only 
8-bit values are significant. 



Interface Registers an d CnrnTnand Descriptions 



The following paragraphs list the registers used in Ethernet 
V^ interface operations and the command descriptions that select the 
I/O functions. 
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ID Register (Base Address 03EFFF - 03FFC0) 

When the UNIX PC is first powered up, the UNIX kernel reads the 
ID register into memory. The ID register is a set of 8 -bit 
registers located at odd byte addresses in the upper 32 words of 
the board address block. The upper four words contain the 
required board identification numbers. The lowest six words 
contain the board-specific Ethernet station address. The 
appropriate driver must determine where the hardware is located. 
The getslot system call (see UNIX System V User's Manual . 
drivers (7) ) locates the offset (slot) . The base address is then 
added to the offset address to access the appropriate registers. 



Base Address 



R/W 



03FEFE 


R 


03FEFE 


R 


03FEFD 


R 


3FFFC 


R 


03FFFB 


R 


03FFFA 


R 




through 


03FECD 




03FECC 


R 


03FECA 


R 


03EFC9 


R 


03EFC8 


R 


03FFC7 


R 


03FFC6 


R 


03FFC5 


R 


03FEC4 


R 


03FFC3 


R 


03FFC2 


R 


03FFC1 


R 


03FFC0 


R 



Description 

MSB of ID, two's complement 

Not Used 

LSB of ID less than two's 

complement 

Not Used 

MSB of ID 



Not Used 

MSB Ethernet Address 

Not Used 

Ethernet Address 

Not Used 

Ethernet Address 

Not Used 

Ethernet Address 

Not Used 

Ethernet Address 

Not Used 

LSB Ethernet Address 

Not Used 
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Software Reset 

A write to any of the four board ID addresses causes the board to 
be reset and put into an inactive state . 



Base Address 

3FFFF 
03FFF8 



R/W 

W 

through 

W 



Description 

Software Reset 
Software Reset 
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LANCE Data Latdi 

This read-only, 16-bit latch is required to accoiranodate the slow 
?^SE?Sai2?er access time to the expansion-board timing 

r^?re:2n?rthrough a two-step P---^ ^,f jf ??^f ?,r;hf^ 
T &MrP r-*=rri <?ters does not produce valid data in time ror T,ne 
a^ive ?/S cycL but the'^data is stored in ^^^^^^^ ^^^%^?f ^, 
sSieiaently"" a read of the latch will return the desired data to 

the CPU. 

Base Address R/W Description 

000006 R LANCE Data Latch 

Status Ring Address 

This write-only 16-bit register is used to supply bits A9 to A21 
TflZm^^Aug address^ Bits Al to ^8 are supplied by an on- 
board counter which is cleared on reset T^^^^^JJi;' J^J^^^^PP^^ 
?SS addressina for the on-board DMA to place LANCE status i^i 
meL?y auJSmSically. A write to this address clears any pending 
interrupts . 



Base Address R/W 



000006 W 



Description 

Status Ring Address 



Control Register 

The board contains a read/write, ^-^^^^ control register to 
^ovide selection of interrupt line, ^^.t^lZllll^^'^^^^.^T^t ?o 
DMA disable for diagnostic purposes. This register is rese-c 
zeros by hardware or software reset. 



^ 



Bit 



DO 



Dl 



D2 



D3 



Signal 

DMAEN 

RESERVED 

INTSEL 

SPARE 



Description 

1 = DMA Enabled 

= DMA Disabled 

1 = Other Selected 

= Ethernet Selected 

1 = Use Interrupt 01 
= Use Interrupt 05 
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A read of this address also resets the board interrupt. 

Base Address R/W Description 

000004 RW Control Register 

LANCE Register Address and Data Ports 

The LANCE chip in slave mode contains two ports. The register 
address port is a 2 -bit port that selects which of the four 16 -bit 
control and status ports are accessed through the register data 
port. 

Base Address R/W Description 

000002 RW LANCE Register Address Port 

000000 RW LANCE Register Data Port 

c 

Software Operation 

Once the LANCE chip has been started, all data and status 
transfers are done through DMA. No I/O access is permitted to 
the board except the software reset and interrupt reset 
functions . 



^ 
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TroublgstiQQting 

The following procedures are a simplified description for 
troubleshooting a UNIX PC Ethernet Expansion Board that is not 
functioning properly or has failed a diagnostics test. The 
following items are required to perform these procedures: 

o Kernel debugger program 

o An Oscilloscope 

o Voltmeter (VOM) 

o Logic Analyzer 

The following reference books will also be useful: 

o Ethernet Board Installation and Diagnostics Guide 

o Advanced Micro Devices Local Area Network Controller AM7990 
(IJ\NCE) Teclinxcal Manual 

Before beginning with the troubleshooting procedures, check the 
schematic against the ICs on the board so they can be identified 
readily. Also, during operation of the expansion board, the 
voltage at J2-13 should be 12 - 13 Vdc . 

Troubleshooting is concerned with the EEB's three basic cycles 
and how they relate to components that have failed. Figure 2 is 
a diagram of the Ethernet states and Table 3 lists the state 
assignment functions during specific cycles. These cycles are: 

o I/O cycle 
o DMA cycle 
o Interrupt cycle 

X/Q. Cyclg 

The I/O cycle consists of three individual cycles as follows: 

o Register Read/Write cycle 
o Board ID Read-Only cycle 
o CPU LANCE Read/Write cycle 

When the EEB has been reset either by a hardware or software 
reset, it is at the idle state. By using the Kernel debugger 
program, the I/O cycle can be examined for the three read and 
write functions listed above. A failure of any of these cycles 
indicates the following hardware problems: 
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Figure 2 Ethernet State Diagram 
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Table 3 State Assignments 



c 



Cycle 


Fuunction 


3 


2 


1 





IDLE 























1 










1 





STLRD 








1 


1 


STLWR 





1 








CPUREGRD 





1 





1 







1 


1 





CPULRD 





1 


1 


1 


CPULWR 


1 











LDMARD 


1 








1 


LDMAWR 


1 





1 







1 





1 


1 


STDMAWR 


1 


1 








lORDCYC 


1 


1 





1 


lOWRCYC 











1 


RQCYC 


1 


^ 


1 


1 





Register Read/Write Cycle 



A failure of this cycle Is a result of a malfunctioning PAL or 
hsir^^^ k?I-e.-Srf^?lS2lnrc:^po^enS«sS:r. .e 

checked for the listed conditions: 

o 4B (PAL16L8A located on schematic page 4) is either 
malfunctioning or the wrong equation is being read. 

o 4C (PAL20R8A located on schematic page 5) i^ either 

malfunctioning or the wrong equation is ^-^^^ ^^^^^^ ^^J%,t 

S?0^"- ^?r3^ seqii-e ^?e?r^o^the i^cle^^iSram, Eigure 3) . 

o 4C - 4E (PAL20R8A, PAL16R8A. PAL16R6A, and PAL16R8 A located on 
° schematic sheet 5) are not receiving clock signals on pm 1. 



L 
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Board ID Read-Only Cycle 

The following components should be checked for failure: 

o 2F (PROM 74S288 or 823123 located on schematic sheet 4) has 
failed. 

o 4B (PAL16L8A located on schematic sheet 4) has failed. 

o There is no clock present. 

CPU LANCE Read/Write Cycle 

The LANCE location address is being accessed by writing to the 
Register Address Pointer (RAP) . The CPU LANCE Read cycle is 
performed in two steps. First, location 0000 is read; second, 
location 0006 is read- returning the valid data from the address 
pointed to by RAP . 

If the CPU LANCE Read/Write cycle fails, check the following 
components for the listed conditions: 

o 4C (PAL20R8 located on schematic sheet 5) the pin 19 - 22, 
CYCO* - CYC3* is not correct. 

o 4E (PAL16R6A located on schematic sheet 5) is not providing 
the proper signal interface (DAS* and READY*) to the LANCE. 

o 4H (AM 7990 LANCE located on schematic sheet 3) is 
malfunctioning. 

DMA Cycle 

The DMA cycle consists of three individual cycles as follows: 

o DMA Read (single or burst) cycle 
o DMA Write (single or burst) cycle 
o STATUS DMA Write (single) cycle 

A failure of any of these cycles indicates the following hardware 
problems as discussed in the following paragraphs. 



c 
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DMA. Read/Write (Single) 

On the first two cycles, DMA Read and DMA Write, the address is 
provided by LANCE. For STATUS DMA Write, the address comes from 
the on board registers IG and IE, and ring counters 2B and 2C, 
located on schematic page 4. These are written to during 
initialization . 

The LANCE performs 12 single DMA READ cycles when a 1 is being 
written to the initializing bit of the LANCE control -status 
register. Using a logic analyzer, check 5D, pin 8 (RQ) located 
on schematic page 4, for these 12 requests corresponding to bus 
grant (EG) from IH, pin 16 with lA pin 12 (XR/W*) high. 

Also, check the signal timing at LANCE as follows: 



o 


4H pin 17 


(HOLD*) schematic page 3 


o 


4H pin 19 


(HLDA*) 


o 


4H pin 18 


(LAS*) 


o 


4H pin 14 


(DAS*) 


o 


4H pin 22 


(READY*) 



fc , Refer to the timing diagram in Figure 3. 



After initialization, LANCE generates the interrupt active low at 
4H pin 11 . The state machine gets the status from the LANCE and 
writes to the status ring. The content is OlCl (see the bit 
definition in the LANCE technical manual) . The state machine 
then generates the interrupt to the CPU at the same time that it 
writes Is to the LANCE, clearing the LANCE interrupt and status. 
If the initialization is complete and correct, the status content 
at the CPU memory will be OlCl. 
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COMPONENT SIGNAL 



I LANCE I 



i4Ci 



I LANCE I 



iLANCEi 



i4Ei 



i4Ci 



(CPU I 



HOLD 



HLDA 



LAS 



DAS 



READY 



RQ 



BG 



XR/W 




500 ns 
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Figure 3 Expansion Board Cycle Diagram 



Next, the LANCE performs a single DMA read to the TMDl every 1.6 
msec. Using the oscilloscope, check the RQ and BG activity. BG 
should have a 500 nsec pulse width. RQ should be gone 100 nsec 
after BG is active. If there is no activity (neither RQ nor BG) 
check if HOLD*, HLDA*, LAS*, DAS*, READY*, and CYCO through CYC3* 
are generated from 4C, located on schematic page 5. 

The cycle should not be stuck at DMA Read longer than 3 us. If 
it is, this indicates that 4C and 4E on schematic page 5 or the 
LANCE is defective. 
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DMA Read/Write (Burst) 

^Tr^^^^^rf^ ■(-•hp DMA Read/Write burst. The 
Using a logic analyzer fmH^l^^Jft words, except for the 
burst «h°^l^/°^?i^53°Jewer ?han 8 words. If the DMA Read/Write 
lTs.Zoll ^nl.%lrforr.%rZ.rly, chec^ 4C and 4E on sche.at.c 
page 5, or the LANCE. 

InL^rrup^-gycla 

The interrupt cycle consists of the LANCE sending^an interrupt to 

the state -^--^^"-/^^^""r^iads^heLScE^ status and requests 
an error, the state machine ^^J^J^^^J^ ^ _ ^^^ecl Once the state 
that the status DMA W-^^- -Y^^l ^^ ?Se?o cation of the current 
machine gets the bus, it writes J° ™ ring address. Then 
status ring address and updates ^^^^J^^^^^^o ?he CPU. Note that 



^ 
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